[Samba] Re: Winbind/PAM Question

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alexander E. Patrakov wrote:

| Winbindd is not for SAMBA. It's for things like "login",
| "sshd" - this  way they can let Windows domain users in.

Not entirely correct.  pam_winbind.so is for unix services
like sshd.

smbd itself can ask winbindd directly to authenticate
a user against the Windows DC.  The advantage here is that
winbindd caches socket connections to the DC and there doesn't
have the tcp setup and tear down and machine credentials
validation to go through everytime.  And winbindd minimizes the
actual number of connections to the DC (rather than one per smbd
process).






cheers, jerry
- ---------------------------------------------------------------------
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"If we're adding to the noise, turn off this song"--Switchfoot (2003)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBI14EIR7qMdg1EfYRAuiWAKDFhRXMSxAw26LhlQtYAUE2AhTU1ACg3M5+
5UqRUlSaSono8EOyJzXRLoQ=
=5lgy
-----END PGP SIGNATURE-----